CVE-1999-0411: Sco Openserver

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.

Affected products

• Sco Openserver: version 3.0 only; version 5 only

Published 1999-03-07. Last modified 2026-06-16.